Legal

Privacy and cookie policy

Last updated: 12 October 2026

The short version

  • We only collect what you choose to send us.
  • This website sets no cookies. It has no analytics, no advertising and no social media trackers.
  • We never sell or share your details for marketing.

Who we are

This website is run by Awa Karlsson (organisation number [organisation number]), [registered address]. We are the data controller for the personal data described here.

For any question about your data, email awa.karlsson@stamdevelopment.se.

What we collect and why

When you use the contact form or email us

We receive your name, your email address and your message. You can also tell us your organisation and your role, but you do not have to.

We use this to reply to you and, if you want one, to arrange a Discovery Session. The legal basis is that you asked us to get in touch before a possible agreement, and our legitimate interest in answering enquiries (GDPR Article 6(1)(b) and (f)).

When you visit the website

Like every website, ours runs on a server that keeps short technical logs: your IP address, your browser type, the page you asked for, and the time. These logs are used to keep the site secure and working. The legal basis is our legitimate interest in running a safe website (GDPR Article 6(1)(f)).

We do not build profiles and we do not track you across sites.

Cookies

This website does not set any cookies. The fonts are loaded from our own site, not from a third party, and there are no embedded videos, maps or social media buttons.

This is why you did not see a cookie banner: there is nothing to accept or refuse. If this ever changes, we will update this page and ask for your consent before any optional cookie is set.

Who handles your data for us

We use a small number of service providers. They only handle your data on our instructions.

  • Vercel hosts the website and keeps the technical logs.
  • Resend delivers the contact form message to our inbox.
  • Our email provider stores the messages you send us.

Some of these providers are based in the United States. Where data leaves the EU or EEA, it is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long we keep it

  • Enquiries that do not lead to working together are deleted within 12 months.
  • If you become a client, we keep what Swedish bookkeeping law requires, which is 7 years for accounting records.
  • Technical logs are kept for a short period set by the hosting provider.

Your rights

Under the GDPR you can ask us to:

  • show you the personal data we hold about you;
  • correct it if it is wrong;
  • delete it;
  • limit how we use it, or object to our using it;
  • give it to you in a format you can take elsewhere.

Email awa.karlsson@stamdevelopment.se and we will answer within one month. It is free.

If you are not satisfied with our answer, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top.